agent epolicy orchestrator extension vulnerabilities and exploits

(subscribe to this query)

Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and previous versions, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/...

Mcafee Epolicy Orchestrator Mcafee Epolicy Orchestrator 4.6.0 Mcafee Epolicy Orchestrator 4.6.1 Mcafee Epolicy Orchestrator 4.6.2 Mcafee Epolicy Orchestrator 4.6.3 Mcafee Epolicy Orchestrator 4.6.4 Mcafee Epolicy Orchestrator 4.6.5 Mcafee Epolicy Orchestrator Agent 4.5 Mcafee Epolicy Orchestrator Agent 4.6

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and previous versions, and the ePO Extension for the McAfee Agent (MA) 4.5 up to and including 4.6, allow remote malicious users to inject arbitrary web script or HTML via the (1) instanceId ...

Mcafee Epolicy Orchestrator Mcafee Epolicy Orchestrator 4.6.0 Mcafee Epolicy Orchestrator 4.6.1 Mcafee Epolicy Orchestrator 4.6.2 Mcafee Epolicy Orchestrator 4.6.3 Mcafee Epolicy Orchestrator 4.6.4 Mcafee Epolicy Orchestrator 4.6.5 Mcafee Epolicy Orchestrator Agent 4.5 Mcafee Epolicy Orchestrator Agent 4.6

1 EDB exploit

A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient fil...

Cisco Cisco Anyconnect Secure Mobility Client Cisco Anyconnect Secure Mobility Client Mcafee Agent Epolicy Orchestrator Extension

A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA before 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server.

Mcafee,llc Mcafee Agent Epo Extension Mcafee Agent

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be...

Openssl Openssl Debian Debian Linux 10.0 Tenable Log Correlation Engine Tenable Nessus Network Monitor 5.11.0 Tenable Nessus Network Monitor 5.11.1 Tenable Nessus Network Monitor 5.12.0 Tenable Nessus Network Monitor 5.12.1 Tenable Nessus Network Monitor 5.13.0 Oracle Business Intelligence 5.5.0.0.0 Oracle Business Intelligence 5.9.0.0.0 Oracle Business Intelligence 12.2.1.3.0 Oracle Business Intelligence 12.2.1.4.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook